Configuring Client Login

Procedure

1. Log in to your bastion host system.
2. In the navigation pane on the left, choose System > System Config > Security.
3. In the Client Login Config area, click Edit on the right.
4. Set the client login parameters by referring to Table 1.

   Table 1 Parameters for configuring client login

   Parameter	Description
   Idle timeout	After you log in to a bastion host using a client, if you do not perform any operation within the specified period, you will be automatically logged out. To perform operations again, you need to log in again. The value ranges from 1 to 43,200, in minutes. The default value is 30.
   Logon with SSH key	Whether to enable SSH key login authentication for users who have been logged out after idle timeout. This function is enabled by default.
   Logon with password	Whether to enable SSH password authentication for users who have been logged out after idle timeout. This function is enabled by default.
   Disable RDP Client	If this function is enabled, users cannot use the RDP client to log in to resources globally. This function is disabled by default.
   Captcha Validation Free Time	After multifactor authentication is enabled, you can configure a grace period for authenticated SSH sessions, allowing users to reconnect without entering credentials repeatedly during this period. The default value is 0, which means that you must enter the verification code for each login. The value ranges from 0 to 168, in hours. The default value is 0. NOTE: If the validation-free time is changed, you need to enter the verification code again when logging in over the SSH client. The configured validation-free time will be counted from the start again.

5. Click OK.